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(57) 

*5S9itt. «Rft«^CQ(x, y)iX*5-kt©**0 
©£Q(i, y)K"3V»T*(Q) = X •QT**SS¥P?S^ 

•5. 




BEST AVAILABLE COPY 



(2) 



t$S 2002-533787, 



a) A ttMI&k LT> m?imm±(D-r^X(D^Q(x, y)lC-ptxTV(Q) = A ■ Q 

b) fjiHx*7— kO)&m$j&'Ak\ tm%&mm\ corns t>-&t l-cm-t^x 

* ; =2*/^ modn 

o>»sc-efcy, n36<«nft«±©js©ft-ca&*ct*«i*«i:-r-5. h*^hce 

cit 6 ] frEx * 7 - k tfmizom & * owej«» k$tts^i$ 
iwni-r*. i i=E«a)*ao 



(3) 



ft& 2002 — S33787 



[w*Ji9] &F<Dmmm*<7 h;Ku 0 . ui)*».r. ^Hi/v$(k, o) 



(4) 



2002-533787, 



[0 0 0 1 ] 
[0 0 0 2] 

<&mm7-$mm ; >*"rJ±&&m Lx-^mmmayrnxmm^nmi-^^ t 
xmsmtzti. sma* mmm<DmmzKLxft&toti:$i&&n'ffLxz<Dm 

[0 0 0 3] 

z>^t&&mx*£z>&?\zm%$:mtt-?z>tzib\z % T-$o>m&m\z&m2*iz> 

o 

[0 0 0 4] 

tomtom** -jjommmit* ^mmo^mm^mmLx^^-iz— v&mn 

[0 0 O 5] 

-73 © =*§*#<D^g8& £ffe73<Dlii*#<7>8^ t ^^fr-fr & - t IZ <fc o X& 

mm&±mTtz>zt*,x-zz> 0 z<d&? Koizumis % ^m^moMmmtm 

■So 

[0 0 0 6] 



(5) 



2002-533787 



t>*i&o ^Rfi^v^^rA-eii, W&m$lk&±rfLLs v-K^Qtr^il^i 
[0 0 0 7] 

z^k&m^x. mmtzmm<&m£*i& 0 scorns . &m<D&mmtf. mmm 

[0 0 0 8] 
[0 0 0 9] 

Jlfi WEfStfT** 1= ft t>T „ J*5H4 J21T<D»SC **TT * „ 
s = ae + k (mod n) 

PI4, S*ffl3£±(&. i/X^AOM**/^*— • *T?fc*jftT?fcy* 
k(4, B)llMi*fclit?i'a>ii: LT»JRS*t«>*AStt-C*y. 
R = kPI4. z*il:»itt4fi)lll4iM-Cft l J, 
a 14, £M®JU()li*ttflr?&y* 

q = aP(4s ztiiz«(&-^-siai«ffla>»iB«-efcy, 

[0 0 10] 

£M(4, s, fc«fctfR*£t?*^-fe—S?*«Mll::a&fiU R 



(6) 



2002-533787 



[0 0 1 1 ] 
ttBE ^ □ -tr X ic MMtfS. C * o 

[0 O 1 2] 
[O 0 1 3] 

fURft&H^b (ecc) it, ca>«-»nsi«*»*-*-4o ecc-ci*. *is«fctfiEB 

[o o 1 4] 
[O 0 1 5] 



(7) 



t$g2 O 02-533787 



fe<5> (tztz.\£. ECDSA^Ii) 0 Ltztf^>X. *Mlz*-*S/*TAfc<fc 

[0 0 1 6] 
[M -5 <&¥©] 

[0 0 1 7] 

^mm¥^<b^Qiz \&mczzttfmL< tj:4>-^m^(Dm 

[0 0 18] 

x * ^ - k <o y /j\ $ tt&sik i <t 4 1 <Dm£fr-& &&mLxm r ft fft a q 

[0 0 1 9] 
[0 0 2 0] 

6lTa>«WCM\ PIi:«F#liftBliSI*©rai:«|jft«B*»r. 

»«flii4t LrM**Lfc-»©a«#**t?- #a«#t2, hi*. ^vsumt 
sismu ca>m^£&&<0<fc5i^^;i'i6£aLTi£^&^i£-f &c 



(8) 
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£<DT-#£B£^t^P-try*18. 20***t€n*t?. ?P-lz 201*. 

sn:i^t-#-5. as*?** y^*< ini^i2i*. xsmm.**. 

fctf^*$^ol|ffl^P-fe^-9-18^^-r^>XV- h ■ * - Ka>»T»fc*£<RJM" 
[0 O 2 1 ] 

*e*<b*sci=fcits«»k, kQ£LTttniT?*£«fc5i^ k • QomoMmw-Z 

[0 O 2 2] 

WRtttftj£lQ Oc. y)©X*7— at*©********'*' H2lz3*3*tT*5 
y. ^{*WI=»*50I=«fcoT***i-C^*. **W©TJU=f'JXAIi. ^P-b-y 

ittltittrtft*. Z<D*Sstt. F q (ql**ft^*») tLt«S**ifc 
*»(*:±<D*Rlft|jiEI=ISB^*JaT©-ftMft»aA<*x.&*ts 

y2 + a^xy + a3y = x 3 + a2X 2 + a4X + a$ ( 1 ) 

aamratfWtftfSttu «Rffl^±cD-r^TCD^Q(x, y)Ai=-3^-c*(a> = 

(Dfi^*«ffltSCtl:«l:otaiJE**tt4uiA«Tf#4tl^#S.I=*^ 
[0 0 2 3] 



(9) 



tf S 20O2-533787 



E: y 2 = x 3 + b mod p (Pli^lS) (2) 
[O O 2 4] 

£-T, r sFp (Fpli-r^-CfD^Stmod prf^ £ fi£ 3 "tM'XpO T?fcy 
, Aor 3 s 1 mod p (iro&ifrm) T-fc£i&r/)<#£-r&«fc5K&&p£:fctf> 
Sdi^T^'S. Tit*.!** p = 7T?&&i§^ 23 mod 7 = 1 t?fe-gx7>r-» r = 

[0 0 2 5] 

fill e*<S3? ft &<> ^mrnmtp- (x,y)-»-(rx. 

mE.±o>mm<0-t^<X(D^Q(x, y^doiNT^CQ) = A -Qf::fc<5J:-5£:g£&A 
tfft&-?&o CCDgg&AI*. A3 EE 1 mod nT-&&Z blZ&m-t&Ztlz£-oX 

E(F p )±<D£<&$in?fc<&o A3 = \<r>\\Z&%L<Dm<tt-fZ>m'&tf1i> 
¥^liia^^^fc-rfSl±1 Ofc*ltT?fe^>„ r 3 mod p = iT-fc'&CO-C-. Q 

[0 0 2 6] 

v- K£Q*<igft$*U 52lz^J:5ICs §S!j£B#I::, yXfA-/<7>-^E 
% p. Q. A. V(Q)s fcitfr*^ Bt#<b^P-b^-y-18IZ < fcoT^ffl-C*#S<i: 
K12l::fetS£ft<So B§#<b. m-&* *«fc£a>BNHtM**«-r* 

[0 0 2 7] 



(10) 



2002-533787 



k = (ko + kj A ) mod n ( 3 ) 
[0 0 2 8] 

±5£T% nteE(Fp)±©j£<D«n?fcy. knife <fcl/kil*gS&T?&<i>o colics 
£k ■ Qii^SC<D«k 5 ic 
k ■ Q = (koQ + kj A Q) mod n ( 4 ) 
[0 0 2 9] 

. kofc^t/hcofit^^^^Aic^L cr^*»> kia>«$£L-c. fi*k©'> 

fe< <h=fc 2#(D1 0)&2tfM1RZ*iZ>) + JfcL^fta (3) $UfflLtkfl)M 
n&-?Z>z.ki!3<aJt!ZX-foZ> a ^2lc54-e^-T«fc^l-ko. ki(Dfil£g^ Lfc&* Me 
nezesi=>l3j:o-C THandbook of Applied Cryptographyj (HAC) izfBK^^xfc r 
Simultaneous Multiple Exponent i at ion J (T;U=T 'J XA14. 88) KgHeiLTfc 

y. seic^^tLt^^T^^uXA^^fflLr^ (4) (Dtjai^ig&Kitfr-f 

[O O 3 O] 

A* : m^MgO, g], ■" g|-ifc^t/m-C*^^t tfy h^eo, ei. - e|_ie 
&13 : gneo + Biei + ■•■ + g|-l«M<» 

±^1?. i = . . . io)2^fc^«» 
7ff^2, A<-0 



(11) 
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A<-A+A % A<-A+G| 

Xf'y^4„ (A) $Ito C<Dm&* A = goeo + giei + ■•■ + g|-ie|_i 
[003 1] 

s atoi^Gj^saj^^'So i = 2i=j:oTGj**im*diLfctt*s^--3f;ui 
[in 



i 


0 


1 


2 


3 




0 


S o 


g i 


S o+ S i 



[O O 3 2] 

£ad3I: (o+ 0(Q)> &nfiLx&&fttfiLtzik. laj^oit^f-^ 
;n icibalt^— ^2 (^2) zwrn-tzcttf-simx-foZo mzo^T-v 

o 



[S2] 



i 


0 


1 


2 


3 


G, 


0 


Q 


* (Q) 


Q+ (Q) 



XArox^^fgfTT^ctii-e^fci^o kia>2jtft«£ttji!L-ctt£fT9J* 
io-efc&J§^ ko^e,ki<D2ift««i*j0«*if^ h«36«5-cfc*a)-eti±*5* 

Wf*. ko^bki0 2^^r*f^J«$4xfc<S^:fT9iJ^ : f-^;U3lc^-r o Ijli. 

i #l<D5ljr=«**ifcttl=J:oT*3e*3K*. Lfci^t. ^-^3 (ft 
3) h = l2 = (11) =3. I3 = (01) = K 14 = 3, fc£l/l5 = OT'fc* 



(12) 
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i 


1 


2 


3 


4 


5 




1 


1 


1 


1 


0 


k, 


0 


1 


0 


1 


0 


I . 


1 


3 


1 


3 


0 



[0 0 3 3] 

fair <fc o kxt- v -? 3 (DfrmrtfrfrtiZ • 

[0 0 3 4] 

g&iiA^-o-efcys i i* 1 (~i£3££ft&o ij = htfey, :W4t-^3 

o LtztfiX. I = 1<D*i^<D5£K<££Aa>fiiliO + Q = Q-Cfc&o 
[0 0 3 5] 

i = 2T-fc<&#0>££(7>i§^ AO>*)]WfSliQt?fcy. Ltctf-sT. A<- Q+Q = 
2Q-C*&y. ^— ^U3^t>lj = 12 = L7c^o-C. G^fi^— ^3 

^bG 3 lc^L<. -ffc5b*>s Q+ ^ (Q)-Cfc^o 
[0 0 3 6] 

LfcJ^o-C. A + G|jl±2Q + Q +VQ = 3Q + tf Q£Sifc£ft'5>o 
[O O 3 7] 

5le]a(DJ£££-C% -T^^*). koq = k. AQtDfil. -f fc:fc>*>kQ#»ai 

[^4] 



i 


A 


1 


Q 


2 


3 Q + tf (Q) 


3 


7 Q + 2 rfr (Q) 


4 


1 5 Q+ 5 (Q) 


5 


3 0 Q+ 1 0 xl> (Q) 



[0 0 3 8] 

£teJjQ (A+A) fc«ki;^ADff (A+G|j) tf&^trfe&o fcfiL. i§ 



(13) 
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[0 0 3 9] 

xai4.85hac) &&ifft&n&^t&m&&>mLxnm-?zzttfX'£z> 0 \ 
t$&m\<Dm&mito\~wiiii-& ^t^x-z^nx-. m^i\zm.m^^itzmmj:wm 

[0 0 4 0] 

. mots&if^tf^tsV^izMiRZtis my}t£Tjis3i)Xj±&&mLxmoQ = 

Aiz±m-?z<Dkmmm\z&±x-&zt!&t>*i%o **»*»^ %}m$ft±-r&tz 
#> \z ^ y l> tr ~> \- &a>k i set a< Rifii-c & £ o 

[0 O 4 1 ] 

«tor. mft&w.toim.T)v3*)xua)mfe.tfm#>**iz><> k = ko + M£»£ 

l^ffl-T * C £ T- £*rf>J-f £ e 

[0 0 4 2] 

l^<-3**0>¥flWei±» 3-3ULtG>T&^tk (sub k) act 4,^1 

MX&Zo l^-DfrnwmipX-lZ. k = k 0 + h A + k2A2£#£2 1 *K m&ig> 

[0 0 4 3] 

*nmo>m2<Dmmmmx'iZs -mitztitzmn&mjs. en (dm^c^^s. 

y2 = ( x 3 _ ax) mod p ( 5 ) 



(14) 



ft£ 2002-533787 



<Dm(D&m<»Wi&. rK&Rfcfttt*****- r 2 = -imodpcifc 

fcttfli-r ^©*K»fflT?»*» tf' = (x. y) -* (-x. 

ry)££&«> (x. y)liWm±\zfoZ>m&W (x. y)*ifit*±l=fc*. c<Z)i§^ 
A* = 1 mod n ( n lie©**** E(F p ) ±<D&X-&&) . Ltz&vXX&U 

srt-zzLktfT-zZo (Q) = a .Qi*wafl>«t5i=aiff**t. z©** 

z©lft«l=»L-CAI=«k*»»*#«l=«i*WI=!T3^t*<-C#*. -<D^ 

k = (ko + kj A) mod n (.6) 

7;I/3'JXA1 ©WBJRQfccfctfQ+tf' (Q) LT^k ■ Q&$£8j~? Z> 

&mLx £ ami? <d&£ M«-r * - 1 tf-c * * o 

[O O 4 4] 

R attic JSffl-T & - t IfiV * S o 
[O O 4 5] 

tfki*a«-r ML. k£#tf>T^*. k^IjRt^Ct 
jtfTOfclWt^n ha;Ufl)»*s *1\ k = (ko + ki A) mod nl=fc*«fc3U: 

-CI*. 3 0JSl±a>k*«ffl'^*^tA < ^*** , J'C&*- 
[O O 4 6] 

ft^L-CiMKDaftSlS*)*^^*^**- LfrL* *tt©Aa>ft»*^»l=<E 
y (fctjtli. ^*il*ECDSAttliE-CiBC«RrtettA<**) . 



(15) 
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[0 O 4 7] 

£ r^t\j ki^*tf)-S)^*<fc-So C*l*fr5*Sfc*JsrFl::KWU E 3(7)7 □ 
-^^-hl'^-fo (k£&g£:Lfcl>) VHrtHtiLr, ajfc,fctfbjA<nJ:y 

ao + bo A =0 mod n 
a] + b] A =0 mod n 

ajj3«fctfbil*-C#«/£lt/h*t^i*t»*Ll^ fcJftBJKD**!** aj fccfet^bj 
rt«S/MR-C ^ t # "C * *?«J "C * * . a j *J «fe iXb i * «t»a | <fc Ifl) j (*, 

^■Clis *&J©kO>-»M';*fl>2fl>a>1 (75^£^£kofcJ:tfkia<±J?£$*L<5> 

o 

[O O 4 8] 

koQ + A kiQ 

[0 O 4 9] 

f0fcJ:Ufi$^< C<blCj;orfT3b^^o HUzli, ^l»fofcJ:l/fi«!: k£ 
*§^t>it-SCtlzJ:oT±fie$^*o ^Hl'z^fflLts v' = (vo' , v 
T )-efc^^2<7)^-i7 HUv' A<gaj£*U kQ(7>iIA<, 
[&3] 

vo'Q+WQ (8) 
[0 0 5 0] 



(16) 
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(n. A) lc*tLT&Jl£ft<5o (n, A) \Z.ft-? l ) 'V K ■ 7 
jUzfUXAlCcky. i l::j££Trj(Z>*Si (fc<t*.f£. try h«) *</jN$<fcy. 
c\t$£ltd\<D&mtfX£ <UZ>mm-£t>-&c\n + djA = rj*<fM££*t<5o 

[O 0 5 1 ] 

Itaa- >? 'J K • TJl/d'JXA^flLfceit L-C#£*i.fc| (dj, rj) |<7> 

*l(dj, rj)| = dj2 + ri 2 $ffltx-C/HS$JK'S>o d*it>(Z>fi/MlH£a>]SI±s 

d 0 ,r 0 

d,,r, 

[O 0 5 2] 

ao= -f 0 , b 0 = d 0 

a, = -r,, bi = d 0 
[0 0 5 3] 

3fca>***H\ ftttk<D/h* 

[0 0 5 4] 

a 0 s bo*5J:lXai. bi©tt-»3&<#x.&*Lfc»^ "0= (ao. b 0 )X'foVu\ = (ai, 



(17) 
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+ bj A =0 (mod n) £iSfc-f„ »K*Qlc<* h;uv = (v 0 . £^ C£ C <»: 
(i(vo + vi X)Qt Lr^8$*t-So aj + bj A =0 (mod n) Vfoh<DX-. &M<D 
i^HtRlcoi^TuoR = uiR = O^figai-r^o Lfci<^t, &W:(D&®lzote<}:Xfz 
\<DO>m-£. ftS<7>S*g§?tRl::-3l^-Cv' R = (v - ZOUO - Ziui) R^mtLT ^ o 
[0 O 5 5] 

^zofc«fe7jzi<!: LTI*. h;Uv' =v - z 0 uo - zwtfiV&ZtzlW 
[0 0 5 6] 

TmtU^H-So SJS^(D^r-l*tT9J^g:^t3^-5o h;Uv = (vO, v1)£ 

luo, u\}&mfrz>mm&miu. o), (o. ^sc^itr*. 

[«4] 



fft*©*fil. -Ttf5b*>. jE8Uft£&Jgl(1. 0). (0. 1)}^t)(u 0 . ui)»Jg«& 
[ft5] 



[0 0 5 7] 

HUv = (k, 0);b<-tf CD T*. (M) (DT<D'iilt&Wk$ 




= v, 




[g&6] 



(18) 
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0 a 0 fc, -a { b 0 

[1*7] 

[0 0 5 8] 
[0 0 5 9] 

d(kf 0 ). round(kfi))£LT£S£;K£z = (z 0 . zi) fctUrtSd £ l=J:o-CkQ 
[0 0 6 0] 

jrafcz*<*a&*ifc*. V = (v 0 * . vi' ) = v - z 0 uo - z lU1 I^J:o-C 
v(k. 0)(D»*ttftW**«*ai3*L*. r&MjfcWifcj ©ftl*. V P = vP 

|±v 0 ' Q + V!' AQ<t LTf?tii£*t<g>o Cfl>«l*. ±aa>*3l=BB#^»»*« 
fflL-C»a-T*Ci:35<-C#. ±ET!»WU ^oH. A.C. 14. 7©627^-5?l=Ett 

Lfc^ot. ktfBr^cDttlffc***"*?** kofc^tf 



(19) 
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[006 1] 

k£3o<7>gpa-k = k 0 + kjA + k 2 X*lz&mt&1*&* iSfrfijfcicfcoT 



"l 


0 


-A 2 ' 




W 


0 


1 


-X 


to 




0 


0 


— n 







[O O 6 2] 
[O O 6 3] 

C;|xt>a>:£&£tefflLTk • Q(Dfif£3fc#><S><t. B§^b^P-fe-y-9-12l::«J:oT& 
[0 0 6 4] 

a*©ciftA«6, x*^-^ifck^S$Sfi6^k = k 0 + k! A + k 2 A2 + . . 

. knH \n-ix-m&titz&. mft&mixim.7)i'^ , )XJ±<Ditt> l )iz. 
teffl-r&c &o cod* a ^-r >K^aafe (i^fc*^? 

[O O 6 5] 

zmm-t&z t iz «fe y % **ifc-r-^s**K»-r $ - 1 izjzorm^ 

[O O 6 6] 

feomtLX. k$k = ko + kiA + k2A2,»: LXW&m-?Z> Z ttfX-% . k 



(20) 
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[O O 6 7] 

fcl*«fc5fclfl*»»SC (NAF) ItliCfc^tS. 
[0 O 6 8] 

[O O 6 9] 

[I&9] 



□ 



101 



1 0-1 



[0070] 

Ct\z£^Xi$f£tE*i& (H.A.C. % 616^- v) „ 
[0 O 7 1 ] 

[0 0 7 2] 

LfcA<ot. ca>aaji*koP©tfjii=iiffl**t*. 

[0073] 



(21) 
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X. k2A2p0>&j££;g#><5C£j!><-e#£o 
[0 0 7 4] 

[0 0 7 5] 
[0 0 7 6] 

k = 1101 10101 1101D2 + [111010101101]2A-efc*»** 

k = [10-100-10-100-1013 + [1000-10-10-10-101] A 
= k' 0 + k' 1 A 
[0 0 7 7] 

1 ■ P. [10-1] • P, [101] ■ P£#t,\ Plcf§|-T5 3 try h -^-r^KO-f- 

[0 0 7 8] 

kP = [10-100-10-100-101]P + [1000-10-10-10-101] • AP 
A<-0 ; #J#iS:3g 

A 0(1 • P) ; k 0 ' 0>±.®.\dv h£;8§-f 
A <- 2A ; A£teAD-r£„ 
A «- 2A 

A «- [10-1]P ; k 0 ' <7)Jb&3 Mv h$«gt§. 
A <- 2*A 

A - = [101] ;ki' (7)3 tfy h ■ O-f > K^£>8g"r<So 



(22) 
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A «- 2A ; A£fgftrf -So 

A-= [101]P ; ki' (7)3 tfy h£>g*-f 

A «- 2^A 

A-= [101]^P ; kf (7)3 tfy h£>8R-r<S> 0 
A *- 22A 

A-= [10-1]P ; k 0 ' (7)£&<7) tfy h£>8g-f -So 
A + =^P ; kP££fiTf So 
[0 0 7 9] 

tim&il/tf^Z-^frtzm-S* -T<<-C(7)j5QeE[zoiN-C AQ = ^ (Q) 5fc 
^F&-r*SI&A7j<#«-r^ 0 »am*»fcU M^ftmfl) r^*jg^>7 h7kl 

bl , b 2 bm^^tB^^o Ctt.fcSfcM'** HU**4ve*tSai=*f« 

U *<DJ=5fcSai***t* r *u j^(7)ISn = #E(F p m) Cf T?» 
tS-tA^tS, g&k (0 <; k <; n) tfM&fufc*** kj^LT r 
JSInj h;nWMR**i<&k = Ikj • A '<t«< d c*Ui. bi. b 

2 . -. b m \~*'oXikj&2titzto : r-to<D (k**-r> **** Hufcfitf©'** 

[0080] 

l^T(7)H»St?l±> «*{*<D±l=HE**Lfc*Rtttfcl=W*<&tt& (^B* 
RH«iftiSJ:tf*Jtttfcfc<fctf rshamir' s trickj ) *M-*-*^il=oivc 

weunMrrs. p3&<»*a-efc*ft*E(Fp|io^<Djiffli=o^-c»wr* 

[0081] 
[O 0 8 2] 

Z(7)i§^ 7P^-OX¥^7b^ 2 - ttf + p = OSiUfcU t = p + 1 -#E( 
F p m) T? fc & C £ 7b<*>fr o T I x & o 
[0 0 8 3] 
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LfcAtoT, A 2 - tA + p = 0 mod nr-fcy, StzX 2 *' 1 - tAl + " + pA ' 
= 0 mod n"Cfc<So 
[0 0 8 4] 

[san o] 

( Xr™"' . . . X , X ) 

b, (0, 0, 0,... 0, 1, -t, p) 
b 2 ( l.-t, p, 0) 

(1, -t, p,0,0,... ...,0) 

(-t, p, 0,0, ... ...,0, 1) 

b ro (P. 0, 0,0,... 0, 1,4) 

bmfc^L^fr^Ott^^^ffl-r-S C ttfX$Z> 0 
[0 0 8 5] 

±$&<Dnmmx-it. k. \q&4> mfrzmz^ttfxz. w&tfimw&vt 

[O O 8 6] 

[S2] 1 (DmMBm&nte-tZ&K'rvZf&Tji-tyn-T* 

— hT-fe'So 

[S3] 12 (Dlfc&^ii^&fcAfrlc&gfc^* y ? 



(24) 



O 0 2-53 
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[12] 



50 



E. p. 0, Q. y 



,52 



■54 



,56 



-60 



A+A £3&fcf5 



* J 



62 



A+G^Sr^tfU-S 



(26) 
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[1^3] 



mm bT a* bo, a„ b x ®^/.NK£#S 



Uo = (ao, boX 

u^ca^b^^^dJi-s 



1 
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CtitUH] 2Jififc1 3^8M 1 0 H (200 1. 8. 1 0) 
l^ffi&JE 1 ] 

[fgBjOPJffl&iaBJj] 
[0 O 0 1 ] 

[O O O 2] 
[ft*<D&ffi] 

[0 0 0 3] 

commit. <*mm<Dtom^&&m&fttt&^ttfx£tj:i\&5tj;MmT-fo 

o 

[0 0 0 4] 
[0 0 0 5] 
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[0006] 

izfc^TlIgfemod p (pl±*ft) ©*Rtt**»«*=*****# lv 
fcft*. ^Rffi^^A-CI*. «MKk*ifel*U S,-KAQ-CA»«» 

M****a fcWtt^ SMiJKDAfcfc 

*©a«#a>»M»kb**t ****** y * Lfc4t,T ' 

[0 0 0 7] 

cD&Mittffl l-c y * -b - v ft ft A Lfctitt- 4^^^' 

[0 0 0 8] 

[0 0 0 9] 

s = ae + k (mod n) 

R = kPI*. z*il=»(6-r*ft«^8B«^*y* 



(29) 



ItS 2002-533787 



[0 0 1 O] 

KfcNfc-r^ifiRl = (sP- eQ)^Stti-r*Z < i:lz«i:or^liE*+L^ 0 ^dJ^*LTi 

IK® tf®7k L «fc 5 t tl>ii] 
[0011] 

h— • TZfVr— va>-*> rxv-h ■ *— Kj TzfVr 

[0 0 12] 
[0 0 13] 

«nft*«ft (ecc) i*. c©tf»raH*»*-r4. ecct-i*. ^fc^tfUBj? 
» ECC7 , ;u=fuXAic«fe-3-cfii-9--rx*ifi/h-*"*ci35<-if**36<» *y**fc« 

[0 0 14] 
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[001 5] 

[0 0 16] 
[0 0 1 7] 

mmmmw^t &q 1= a #*l< 

'ttZntit^X. «HMPWMr*LT AQ**art-**#a* H**l^J= 

( A 121*10 

«*«fflL-cjfta>flba>tta*ifia-e#*-i:**-r. 

[0 0 1 8] 

o x * ^ — tea * iFui -s * *v ^ t £ t?*as*<att $ ft & „ 
[001 9] 



(31) 
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h vrFommtzwrnx- & y bjj b ^ic # * 5 . 
[0020] 

asouiu z<Dmm&&ft<D&?iz?->r*)\,\6$&Lx&mirz>mffi&?z>z 

<ta>T-#£B&-SHb:?P-fey-9-18. 20£-5-*i-e;h#fr„ 201*. Zfu 

[002 1] 

^B§^b^lcfc(t-i)g|^k. kO<b: LTteffl-C:#& <fc 5 k ■ Q<DteO> 
[0 0 2 2] 

y 2 + ajxy + a3y = x 3 + a2X 2 + a4X + a6 ( 1 ) 

gEitl!3ff£¥&<M<??*EL. m?i&^i±(Ot^X(D^Q(x, y) j&dOl^T tl> (Q) = 

a • Q-efc<5>ii£. ^Qt^iak tommit. ko^^^^u^^twrn^t 
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[0 0 2 3] 

E: y2 = x3 + b mod p (Pl**») (2) 
[ 0 O 2 4 ] 

% ^or 3 = 1 mod p -Cfc*ftr 5I=«»p 

SZfctf-T?**. fciitf, P = 7T?fc*»*, 23 mod 7 = 1 r = 

[O O 2 5] 

ftt*E*<ffifc**i.fc«* *«H»0*<**!>&*t«. MBBtttf: (x.y)->(rx. 

tfM-ra. dCOSISAIi. A3 = 1 mod nX&&^ klz&MilrZZ. k\z£iX 
*ft«:t4<-C«. Ca>»£. nli. F p <D±lCfc*«|Rlfil*E±0>£<Dft. -T 
*Pb*>. E(F p )±a>J*fl>«t-C**. A 3 = 1(D A 

MH»0*»fc"r»f4lOf£C+-Cfc«o r 3 mod p = n?**<DT?s Q 

i^(Q)©w*35<Ei=H-r*asc**a-r*. Lf=*<o-c* *L*w-***t7LT 

Afc****©*******^ 1 ^* AI=<fc******l=»*MI=*ff-e# 
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[0 0 2 6] 

[0 0 2 7] 

k = (ko + ki A ) mod n ( 3 ) 
[0 0 2 8] 

_tsrc*s ni*E(F p )±(7)^(7>iar-&y. kofc^iAiiiStft-cfc-s,, c<z>i§^ 

k • Q = (koQ + ki AQ) mod n (4) 
[O O 2 9] 

5fci§^ k^S«-T*(DT*(*3tC< . ##bf*;/ h££-$fcl\g$[log 2 (n)]/2a> 
, knfc^U^tDfit^^AlcilftL Cr^*?*,. ki<Dft*i:LT, g£kCD'> 
!EE<tt2^©1©I$A<IiR5^) . (3) ^mmLx kom^ 

nezes«olc«fc r>X THandbook of Applied Cryptographyj (HAC) iz^WL^ixtz r 
Simultaneous Multiple Exponentiation j (7;U=f 'J 88) izSfttLTJS 

56ic^$^-ci>^T;u=r'jXA^^fflLria^ (4) MasMfctHW 

[0 0 3 0] 

XJx i ta^^sjiDM 

A* : M*ga Ki. - g|-ifc«fctfmT*fclM \*v hfifteo. ej. - e Mo 
Hi* : gneo + 61 e 1 + ••' + ei-1 e l-1° 
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^f^U Mrtt*. i #0*5, (2l -Dicwur. 

i = • • • io^"***" 

A<-A+As A<-A+G| 

x^**4. (a) cam** a = g 0 e 0 + *w + - + «i-i e i-i 

[003 1] 

1 ) Iw^f o 



n i o 1 1 I a 1 3 _ 

U |o I g» |g> i g D +gi 1 



[0 0 3 2] 

am: (q+ *w» *mTLt:js*flFi«Lfc«. am**©***-*— 



[$2] 
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io-c&£J§^ ko*^6>ki©2it««rt©«*ifv hl»A<5T?fe^a>-c- 1 iifi|5^ 
ill 0>*7rt<^T<4tfy h£^*K m2a>fT#&a>T<itfy KITH* TP 

3) h = 12 = (11) =3. I 3 = (01) = U I4 = 3. fc<J:tf I5 = 



[13] 



i 


1 


2 


3 


4 


5 


k 0 


1 


1 


1 


1 


0 


k, 


0 


1 


0 


1 


0 


I s 


1 


3 


1 


3 


0 



[0 0 3 3] 

C0>7VU=f 'J XA$^7t Z><D\Z&^tj:-?'<.T<Dmft&mZ> d £ A<T*^, 621= 
[0 0 3 4] 

«&jiiA<-o-efcy. i 1*1 icts^^tL^o ij = hT?*y, c^xii^-^us 

e Lfc*<^T, I = 1(Di§#a>£&|-J:'S>A<DfiiliO + Q = QT-fc<&„ 
[0 0 3 5] 

i = 2-efc&2K(D£&a>i§^> A«IliQt'&y, Lfcrt<oT. A<- Q+Q = 
2QT*fey, x— ^;U3^t>lj = I2 = 3T?fe-5o LfcJ^oT, G^lix— ^U3 
frt>G3\zmL<* -ttjit>*>. 0+ ^(Q)t?fc^o 
[0 0 3 6] 

LfcMoT. A + G|jl*2Q + Q + ipQ = 30 +^Qtmm Zh&o 
[0 0 3 7] 

B.Wt. 5@@0SStt% -r^+?*.s koq = k, AQ(7)fii, -rfcfr*.kQ*<Stfi 

£*T.<i>£T-. f-^ju (^4) iziHtt^Hfc i <»mz £\zmmz tx&o 
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i 


A 


1 


Q 


2 


3 Q+ (Q) 


3 


7 Q+ 2 ifi (Q) 


4 


1 5Q+5 (Q) 


5 


3 0 Q+ 1 0 tf> (Q) 



[0 O 3 8] 

j&fSiJD (A+A) fc<fct;£Jn3l (A+G | j ) tf&^-C-fc&o fc/£U li 
[0 0 3 9] 

LfctfoT, Cfl>^£-C?l±, maxllog 2 (ki)}l::Sf LlM&<Dj£teJra<t* ISI^^t 
XA14.85HAC) fcJjtfiftPMWftSEftSttffl LrUM*** d i 
G j £ ^ _ -j } u 2 t» ft* -T £ - £ 1= <fc ^> "C £in Jf * * A I = * - ^ * 

[0 0 4 0] 

. «ko*5J:Ofki3&«7>^AI=a«$*L, JS^^T;u=r>jXA^fflL-C3lkoQ = 
ki AQ*<±l£S*i&o k & Z<D IZMIR? zattlt* kg**7>y 

able <fc y '>&l^ tf h &£>k j «ci *< pltlT* fe £ o 

[0041] 

±Ea>ttaji=fci*T. k = k 0 + ki a hb»i=«^#*3#***i= 
ic^ ffl-r - £ 1 T? # * fe * • 
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[O 0 4 2] 

L^< -Dfr<DW&TpX-\t* 3-D&.±<DTit^Mk (sub k) Z. t 

mx&Z> 0 l^<-ofr<»W&rpVlt. k = ko + ki A + k 2 X 2 ^m^^. mmg> 

[0 0 4 3] 

y 2 = ( x 3 . ax ) mod p (5) 

tf&mztiZo co>i§£*,. P i±'>^< time? h&&-f&m®LX'&& 0 z. 

0)m<Dtol&<Dm-£* rl=iB»*»tt*<»<P*- -£>i§^> r 2 = - 1 mod plcfc: 

^ffl-T^i^^fc^o C0)g|i£ff2gg-C*lis WI4»SC^' : (x. y) -* (-x. 
ry)$tS» (x, y)*<ifiMU:l= (x. y) tftMLtlzfe*. zomS 
. A* = 1 mod n ( n liC<Di§£t . E (F p ) ±0)^T*fe*) % Lfc^otA^S 
mtZZttfT'ZZo (Q) = A •Q(4ftr^(7>cfc5l-|ltT$H. CCDJi^ 

m^cDkicgi-r^i^jcii, mi onnmmkmcx&v. ^iz^-oxm^ti 

k = (ko + ki A ) mod n ( 6 ) 

x. Tj^vxA-wmwmQti&xsw m^mLx^-Q^mtn-thz 

t^ff*. Z<Of\MXlt. max{log 2 (kj)}lc^L^2&<7>£teJ]D<!:, m^tSLO 

mmLx^mm<Dm^nm-t^ztti<xt^o 

[O O 4 4] 

n&®\zt,mm-tzzktfX'£&o 

[0 0 4 5] 
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^Rl^^ie^b^P h=UU<Di§^ ^-fs k = (ko + MA) mod nl::&5«fc5l= 
[0 0 4 6] 

y (tztz.l£. Z*uttECDSAttE-CfiC*Rrtett*<**) » 
[0 0 4 7] 

6 rji^j k|t*«>«eK*tfcfto c*t*fr5*fttBlTI=BMHL. i3©7P 
He*"*". (k**Ii:L4^) *«MH-JU: LT, ajfc<fctfbj#n J: y 

ao + bo A =0 mod n 
a\ + b] A =0 mod n 

o 

[0 0 4 8] 

koQ + Ak^Q 

[0 0 4 9] 
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Z>Zt\z&^>X±l8.Zti&o <<*y hJUz $&mLX. V' = (V 0 ' . V 

[»3] 

vo ; Q + WQ (8) 

[0 0 5 0] 

^*t^4S^*JSffl^T;U=f'JXA (HAC, 118^-v) d t rfolMXfo 

A*t*t (n, A) izttLXmmZH&o (n. A ) \Z#-?&&i&zl— J7 'J *y K • 7 

cjfc<fctfdj(D£S!#*£< te-S»»tt**3-&cin + dj A = r|jWJ*a?*L<&. 
[005 1 ] 

MUl-* 'J v K • T;U=f'JXA£&B?L*:$S*<!: Ltib^ifcl (dj. rj) \<D 
^l(dj, rj) | = dj2 + rj2^fflL>rS«^$tL*o C*i&a>g/MIH£(DiIli. 




[0 0 5 2] 
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m. 

ao = - r 0 , be = d 0 
a x = - r, , bi = i<> 

[0 0 5 3] 

&<D$X£l*s flMRk©/h* ^ 
[O O 5 4] 

a 0 . bofcJi^aL bi©IWi<4A6*ifc**, u 0 = (ao. b 0 )T-fcyu 1 = (ai. 

+ bj A = 0 (mod n) »K*QI=** HUv = < v 0. vi)*»C«di: 

l±(vo + viA)Q£L-C5£g£*t<S>o aj + bj A = 0 (mod n)ffe*fl)^. 
»«*RI30lxrurfl = uiR = Oifif&SL-t&o LtrtfoT. ftSc&ggfczofccfctfz 
ff*a>»S*RI=oLx-Cv' R = (v - z 0 u 0 - ziui)R*<l*irr*. 
[005 5] 

Mtzofc*tfzifc LTlis h;Uv' =v - z 0 uo - ziui#T?#*rt=l*'J* 
[O O 5 6] 

-C»m**i*- «IW©*lft-CC*ff5"Jilllf^fi*5*L*. k^f;uv = (vO, v1)£ 

luo, uu»is^&«*«ia. o), (o, m *5**<j*sm-*. 

[»4] 
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=(v - v 'ft i] 



ffe^a>7a[«k -T^Jh*,. jE8iit£*j£{(i. o), (o, i)}^t»(u 0 . ui)ajg«& 

[&5] 



[0 0 5 7] 

hJUv = (k, 0)A<HfPrt»**"r*a>-C, ttft (M) fl>TO)fil*^Kt* 

o 

[ft6] 

a. 



[*7] 



[0 0 5 8] 
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[0 O 5 9] 

k<Dtt*<»fc**i.*fr. fc*lM4#*>&*tfc*. £"f\ z^(zO. zi) = (roun 
d(kf 0 ). round(kfi))tL-CM**t*z= (z 0 . zi) -*r=-fcoTkQ 

[O O 6 O] 

3BWfcz*<#to&*LfcaL V = (vo' . vi' ) =v - z 0 u 0 - z W lz&-?X 
v(k. 0)(DW«ft*Wtf»a^*. r«b*w&M1*j ©Wi. V P = vP 

liv 0 ' Q + vi' AQt L-c^tli*>h.^o :©Iit ±j*©«k5i=ran»j«»i**« 
fflL-C»a-r*-t^1f** ±E-efiWlU ^H.A.C.14.7(D627^-vlcsB« 
**i-C^*«fc 3 (NAF) W»^b*«ffl-r*-^l=*^"C*y*^ 

[006 1] 

k£30CDBP#k = k 0 + kiA + k 2 A2|=»K-r*»^ L3fiM*l=«koT 
M&8] 





0 






"2" 


0 


I 


-/* 


to 




0 


0 


-w 







[0 0 6 2] 
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[0 0 6 3] 
[0 0 6 4] 

^mo>Ztti:t<h>. -fSStk A<S^fS^k = ko + kiA + k2A2 + . . 

[0 0 6 5] 
[0 0 6 6] 

ft&O^Ji U"C. k£k = ko + kiA + k 2 A2t LrmS^-f <& ^ <b k 

o 

[0 0 6 7] 

fi£#kji*. ##>t>*i*:&. 2it*^t,. «fcy>fci^Mfp ■ tfy h£=rf& 

JtPL^<fc5«:3^IB»»SC (NAF) ^.h&cl^Tf^So 
[0 0 6 8] 

#kj*<l5#^bS*t7cgL kj A WoVrn*m-tZ>tztt>\Z7--?)\,*fttfLirZ>z. 

[O O 6 9] 
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[»93 



101 



10-1 



[0 0 7 0] 

:ii:J:oTft***i4 (H.A.C.. 616^-v) . 
[007 1] 

jft*»iJI*fci*«tft*««t-cJ:^a>-c. zrof-^W§^i^^ 

[0 0 7 2] 
[0 0 7 3] 

ts k2A2Pfl>i****A*-fc* < ' T? ** 0 
[0 0 7 4] 

[0 0 7 5] 
[0 O 7 6] 
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k = [101 10101 1 101]2 + [111010101101]2A-efc£t§^ 

k = [10-100-10-100-101] + [1000-10-10-10-101] A 
= k' o + k' 1 A 
[0 0 7 7] 

i-p. [io-i] • p. [101] ■ P£^t,\ p\zm-r^>3 \iv v • > ■ t— 

7;Uft<*fflH::)(tiJ$*l&. Z-OmS. 2lsJ(DEC*0i[fcekL^2|H](7>ECf&ADj!)<^T? 
[O O 7 8] 

kP = [10-100-10-100-101] P + [1 000-1 0-1 0-1 0-1 01 ] ■ AP 
A*-0 ; fcJSUSS 

A += ip (1 ■ P) ; k 0 ' <D±iil£y h£>Sft"f &o 
A «- 2A ; A$^*Q-r-5o 
A <- 2A 

a «- [io— id p ; k 0 ' o±(i3 h&mm-?z>o 

A *- 24A 

A - = [101] ; ki' (D3t'7h^OK0$)Stt§, 

A *- 2A ; A£teJjn-r<5„ 

A-= [101]P ; ki' 0)3 Mv h*SH»-rS. 

A «- 24A 

A - = [101] ;ki" (7)3lf^l«^in. 
A <- 22a 

A- = [10-1] P ; k 0 ' ©liOf^ h^>^a-r^o 
A + =ipP ; kP£±fi£-f 
[0 0 7 9] 
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bl , b2 bB*»tti-*. COJ:3ft»l^ h;H*t*lf*l»»=»* 

U ^.fcS&SRI***^*- jft©»n = #E(F P ™) Afl>») "C* 

t4^i^-c*4. MlSk (0 <; k <; n) *««e>*ifc*** kj^Lt r 

£ixj Hb*<»R**i*k = Ikj • Al**<cfc*<-T?#*. -m*. bi. b 
2 . .... y:j:o-c±^*i^W (^It) t>*A*hj\,ktt*a«* 

[0 O 8 O] 

n»**fc<fetf*Jt**a3*^ TShamir' s trickj ) ^ l=-3^T 

[008 1] 

, BeFp-CfcftE* AiB (Fp^tfttfll*ft***l=fc LxTK,,, " r *- 
[0 O 8 2] 

-^ii-a. 3>n*=**¥«uW 2 _ t * + P = 0*«fcU t = p + 1 -#E( 
Fp"") t? fc £ - t tft>fr ott^. 
[O O 8 3] 

LfctfoT. A2 - tA + p = &mod n-Cfey* £fcA2+i - tAl + ' +pA' 

= 0 mod nt?fc-5>o 
[O O 8 4] 

[fti o] 
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(V 

bi (0, 0, 0,. 
b 2 ( 



0, 1, -t, p) 

1, -f, p, 0) 



(1, -t, pAO,.. 
K p, o.o, ... 
<P, o, OA... 



... s 0) 

. A i) 

0, 1,-t) 



[0 0 8 5] 
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